This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/DIcKsq12i9EBZxhMXx8yAM86cK8.roa File: DIcKsq12i9EBZxhMXx8yAM86cK8.roa (raw, json) Hash identifier: 5zSqEpoGXNoeUDfmGdOAD78MAxgM2DTHwLaUQmzX0AA= Subject key identifier: 0C:87:0A:B2:AD:76:8B:D1:01:67:18:4C:5F:1F:32:00:CF:3A:70:AF Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019B797EF770A02F06EF84EDBA096F6F5D78 Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/DIcKsq12i9EBZxhMXx8yAM86cK8.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215597 IP address blocks: 5.181.196.0/24 maxlen: 24 5.181.197.0/24 maxlen: 24 82.199.222.0/23 maxlen: 23 82.199.222.0/24 maxlen: 24 82.199.223.0/24 maxlen: 24 91.213.191.0/24 maxlen: 24 91.217.185.0/24 maxlen: 24 185.90.252.0/24 maxlen: 24 185.95.206.0/23 maxlen: 23 185.95.206.0/24 maxlen: 24 185.95.207.0/24 maxlen: 24 212.95.142.0/24 maxlen: 24 212.95.148.0/24 maxlen: 24 212.95.156.0/24 maxlen: 24 212.95.158.0/24 maxlen: 24 2a12:f680:200::/48 maxlen: 48 2a12:f680:201::/48 maxlen: 48 2a12:f680:204::/48 maxlen: 48 2a12:f680:205::/48 maxlen: 48 2a12:f680:206::/48 maxlen: 48 2a12:f680:207::/48 maxlen: 48 2a12:f680:208::/48 maxlen: 48 2a12:f680:220::/43 maxlen: 43 2a12:f680:220::/45 maxlen: 45 2a12:f680:228::/45 maxlen: 45 2a12:f680:230::/45 maxlen: 45 2a12:f680:238::/45 maxlen: 45 2a12:f680:240::/43 maxlen: 43 2a12:f680:240::/45 maxlen: 45 2a12:f680:248::/45 maxlen: 45 2a12:f680:250::/45 maxlen: 45 2a12:f680:258::/45 maxlen: 45 2a12:f680:260::/43 maxlen: 43 2a12:f680:260::/45 maxlen: 45 2a12:f680:268::/45 maxlen: 45 2a12:f680:270::/45 maxlen: 45 2a12:f680:278::/45 maxlen: 45 2a12:f680:600::/48 maxlen: 48 2a12:f680:601::/48 maxlen: 48 2a12:f680:602::/48 maxlen: 48 2a12:f680:604::/48 maxlen: 48 2a12:f680:620::/43 maxlen: 43 2a12:f680:620::/45 maxlen: 45 2a12:f680:628::/45 maxlen: 45 2a12:f680:630::/45 maxlen: 45 2a12:f680:638::/45 maxlen: 45 2a12:f680:640::/43 maxlen: 43 2a12:f680:640::/45 maxlen: 45 2a12:f680:648::/45 maxlen: 45 2a12:f680:650::/45 maxlen: 45 2a12:f680:658::/45 maxlen: 45 2a12:f680:660::/43 maxlen: 43 2a12:f680:660::/45 maxlen: 45 2a12:f680:668::/45 maxlen: 45 2a12:f680:670::/45 maxlen: 45 2a12:f680:678::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f7:70:a0:2f:06:ef:84:ed:ba:09:6f:6f:5d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c870ab2ad768bd10167184c5f1f3200cf3a70af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:80:c8:af:96:cc:bf:77:47:69:4f:5b:88: 90:c4:3e:4b:9e:62:02:ba:3e:4e:5b:11:86:81:e5: 93:72:35:a6:1e:9c:f0:cb:f9:af:a5:e5:3e:38:db: 6d:1e:a6:ad:78:57:0e:a3:4c:c1:1b:83:79:98:4b: f0:d9:56:89:2e:09:09:1d:17:02:bd:70:e4:6d:1c: ca:38:fe:c2:3c:54:7f:9d:a4:31:86:30:ce:bd:7f: 7e:3e:9f:c9:d9:5c:2f:a3:71:a6:0b:9d:ec:ec:b7: 88:aa:e2:65:3a:77:b0:02:0d:c1:69:e7:1e:a5:18: cb:c5:d8:4c:8e:3e:e4:62:ee:e0:8b:7c:09:b2:23: 87:53:6c:03:f6:6f:03:8f:53:93:8f:6d:c2:88:83: 20:e5:ac:58:49:d6:26:f1:10:68:98:ef:04:d3:c3: df:f3:11:85:09:64:87:d4:48:34:73:67:82:23:d2: 93:a9:68:7d:de:ad:ae:db:22:ca:49:a0:fb:0b:4f: 50:a2:3c:67:c9:eb:c4:c9:9a:9f:ff:b6:ca:da:c8: 39:f8:21:07:83:5f:75:cb:aa:59:62:33:59:35:c2: ab:a7:0d:a4:3c:84:a6:d7:24:ab:1a:16:57:5f:7a: ec:15:fe:f4:59:ce:6e:c5:84:0a:6c:2e:a0:9f:90: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:87:0A:B2:AD:76:8B:D1:01:67:18:4C:5F:1F:32:00:CF:3A:70:AF X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/DIcKsq12i9EBZxhMXx8yAM86cK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.196.0/23 82.199.222.0/23 91.213.191.0/24 91.217.185.0/24 185.90.252.0/24 185.95.206.0/23 212.95.142.0/24 212.95.148.0/24 212.95.156.0/24 212.95.158.0/24 IPv6: 2a12:f680:200::/47 2a12:f680:204::-2a12:f680:208:ffff:ffff:ffff:ffff:ffff 2a12:f680:220::-2a12:f680:27f:ffff:ffff:ffff:ffff:ffff 2a12:f680:600::-2a12:f680:602:ffff:ffff:ffff:ffff:ffff 2a12:f680:604::/48 2a12:f680:620::-2a12:f680:67f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 34:9f:21:c4:f1:ae:e0:a4:51:8c:9d:c9:34:db:e5:64:3d:dd: c8:26:65:b0:c6:be:e3:0b:b5:3a:e8:62:7f:6c:bb:17:22:3d: 3d:5a:27:ea:c9:a4:fd:80:15:82:c2:6b:02:30:46:29:47:07: b6:9a:6e:d2:be:5b:59:79:0f:f3:53:05:f9:ba:09:6d:7f:e2: ff:84:8b:a3:47:b7:1a:9b:dd:82:c1:80:22:a8:3a:c4:a2:7c: 21:7d:33:2b:7f:e5:b8:4f:b7:52:ca:06:01:bc:0a:60:a5:b9: 0c:23:f7:8e:e0:d0:45:a6:49:39:ac:c0:d9:9c:32:8f:ec:c6: 58:41:38:df:21:8a:fb:af:1c:0b:a5:67:57:8f:e4:4f:76:75: 0e:c1:26:fe:31:da:65:5e:50:69:11:c3:ee:8a:65:5d:25:93: 8f:fa:53:e6:4a:6c:28:7b:64:5d:96:12:fd:9c:97:ff:9f:f7: 54:98:ca:7b:72:7a:18:c9:b9:30:e1:e5:87:50:ae:e0:cb:c2: 4b:1a:50:f4:49:a4:a0:12:f1:6e:44:c4:a8:d2:d2:8d:6f:bd: 1d:12:0e:34:d9:a7:cb:9c:c3:98:43:77:9d:dd:3e:90:e5:19: e1:e8:91:4f:34:bf:c0:d2:8d:da:44:64:73:c2:74:cf:d2:13: 7f:b2:c1:a3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt5fvdwoC8G74Ttuglvb114MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzg3MGFiMmFkNzY4YmQxMDE2NzE4NGM1ZjFmMzIwMGNmM2E3MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RaAyK+WzL93R2lPW4iQxD5LnmIC uj5OWxGGgeWTcjWmHpzwy/mvpeU+ONttHqateFcOo0zBG4N5mEvw2VaJLgkJHRcC vXDkbRzKOP7CPFR/naQxhjDOvX9+Pp/J2Vwvo3GmC53s7LeIquJlOnewAg3Baece pRjLxdhMjj7kYu7gi3wJsiOHU2wD9m8Dj1OTj23CiIMg5axYSdYm8RBomO8E08Pf 8xGFCWSH1Eg0c2eCI9KTqWh93q2u2yLKSaD7C09QojxnyevEyZqf/7bK2sg5+CEH g191y6pZYjNZNcKrpw2kPISm1ySrGhZXX3rsFf70Wc5uxYQKbC6gn5DvOwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFAyHCrKtdovRAWcYTF8fMgDPOnCvMB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvREljS3NxMTJpOUVCWnhoTVh4OHlBTTg2Y0s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTBCBAIAATA8AwQBBbXE AwQBUsfeAwQAW9W/AwQAW9m5AwQAuVr8AwQBuV/OAwQA1F+OAwQA1F+UAwQA1F+c AwQA1F+eMGcEAgACMGEDBwEqEvaAAgAwEgMHAioS9oACBAMHACoS9oACCDASAwcF KhL2gAIgAwcHKhL2gAIAMBEDBgEqEvaABgMHACoS9oAGAgMHACoS9oAGBDASAwcF KhL2gAYgAwcHKhL2gAYAMA0GCSqGSIb3DQEBCwUAA4IBAQA0nyHE8a7gpFGMnck0 2+VkPd3IJmWwxr7jC7U66GJ/bLsXIj09WifqyaT9gBWCwmsCMEYpRwe2mm7SvltZ eQ/zUwX5ugltf+L/hIujR7cam92CwYAiqDrEonwhfTMrf+W4T7dSygYBvApgpbkM I/eO4NBFpkk5rMDZnDKP7MZYQTjfIYr7rxwLpWdXj+RPdnUOwSb+MdplXlBpEcPu imVdJZOP+lPmSmwoe2RdlhL9nJf/n/dUmMp7cnoYybkw4eWHUK7gy8JLGlD0SaSg EvFuRMSo0tKNb70dEg402afLnMOYQ3ed3T6Q5Rnh6JFPNL/A0o3aRGRzwnTP0hN/ ssGj -----END CERTIFICATE-----Generated at Sun Jan 25 21:25:58 2026 by rpki-client